Application platform with flexible permissioning

ABSTRACT

Systems and methods are provided for an application platform with flexible permissioning. In one embodiment, an application platform with flexible permissioning comprises: a service provider server adapted to interact with an application development server and a client device over a network, the service provider server adapted to implement at least one application programming interface (API); one or more processors; and one or more memories adapted to store machine-readable instructions which when executed by the processors cause the application platform with flexible permissioning to: maintain a profile associated with at least one application developer using the application development server; receive an API call from the application developer; authenticate the application developer and authorize the API call; assign an access level to the application developer based on the profile associated with the application developer; and control permissions given to the application developer to perform operations available based on the assigned access level.

CROSS-REFERENCE TO RELATED APPLICATIONS

This continuation application claims priority to and the benefit of U.S.patent application Ser. No. 15/647,060 filed Jul. 11, 2017, which is acontinuation of Ser. No. 15/162,284, filed May 23, 2016 and issued asU.S. Pat. No. 9,705,891 on Jul. 11, 2017, which is a continuation ofU.S. patent application Ser. No. 14/312,263, filed on Jun. 23, 2014 andissued as U.S. Pat. No. 9,350,741 on May 24, 2016 and which is acontinuation of U.S. patent application Ser. No. 12/848,533, filed onAug. 2, 2010 and issued as U.S. Pat. No. 8,775,618 on Jul. 8, 2014. Thecontents of the above listed applications are incorporated herein byreference.

BACKGROUND Technical Field

Embodiments of the present disclosure generally relate to applicationplatforms, and more particularly, to methods and systems for providingflexible permissioning for application platforms.

Related Art

Existing application platforms allow an application developer to developapplications that may be used for various purposes in various contexts.In this regard, an application programming interface (API) is madeavailable to application developers to develop applications for aspecific application platform. The applications may be developed or soldby the manufacturer of a mobile device or by third party applicationdevelopers. A consumer may load applications on the mobile device, whichmay run the applications after the mobile device has been manufacturedand purchased.

An API is an interface that a software program implements to allow othersoftware to interact with it. APIs may be implemented by applications,libraries and operating systems to define how other software can makecalls to or request services from them. An API determines the vocabularyand calling conventions the application developer should employ to usethe services. It may include specifications for routines, datastructures, object classes, and protocols used to communicate betweenthe application developer and the provider of the API.

Some companies make their APIs and related features freely available.For example, Microsoft makes the Microsoft Windows API public and Applereleases APIs such as Carbon and Cocoa so that software can be writtenfor their platform. Other companies may protect information on theirAPIs from the general public. For example, Sony used to make itsofficial PlayStation 2 API available only to licensed PlayStationdevelopers. This enabled Sony to control who wrote PlayStation 2 games.Such control can have quality control benefits and potential licenserevenue.

However, making API features available to application developers mayhave a number of shortcomings related to security or confidentiality.For example, application developers may have different resources,preferences or policies for different types of security mechanisms, somepreferring security mechanisms that are low in cost or easier toimplement but not as reliable.

As such, providing application developers (licensed or not) with fullaccess and use of all features of APIs may pose a risk that may be dueat least in part, for example, to substandard security policies orpractices of application developers using the APIs.

SUMMARY

As will be further described herein in relation to various embodiments,systems and methods are provided for an application platform withflexible permissioning so that full access and use of all features ofAPIs may be controlled to allow only those API features that aparticular application developer may need based on the applicationdeveloper's profile.

According to an embodiment, an application platform with flexiblepermissioning comprises a service provider server adapted to interactwith an application development server and a client device over anetwork, wherein the service provider server is adapted to implement atleast one application programming interface (API). The applicationplatform with flexible permissioning also comprises one or moreprocessors and one or more memories adapted to store a plurality ofmachine-readable instructions which when executed by the one or moreprocessors are adapted to cause the application platform with flexiblepermissioning to: maintain, at the service provider server, a profileassociated with at least one application developer using the applicationdevelopment server; receive an API call from the application developer;authenticate the application developer and authorize the API call;assign an access level to the application developer based on the profileassociated with the application developer; and control permissions givento the application developer to perform operations available based onthe assigned access level.

According to another embodiment, a computer-implemented method forproviding an application platform with flexible permissioning comprisesmaintaining, at a service provider server, a profile associated with atleast one application developer using an application programminginterface (API) provided by the service provider server. The method alsocomprises receiving an API call from the application developer. Themethod also comprises authenticating the application developer andauthorizing the API call. The method also comprises assigning an accesslevel to the application developer based on the profile associated withthe application developer; and controlling permissions given to theapplication developer to perform operations available based on theassigned access level.

According to another embodiment, an infrastructure for an applicationplatform with flexible permissioning comprises a service provider servercomprising an application platform that includes a plurality ofapplication programming interfaces (APIs), wherein the APIs are adaptedto be provided to at least one application developer using anapplication development server for developing applications operable on aclient device. The infrastructure also comprises one or more processors;and one or more memories adapted to store a plurality ofmachine-readable instructions which when executed by the one or moreprocessors are adapted to cause the infrastructure to: maintain, at theservice provider server, a profile associated with the at least oneapplication developer; receive an API call from the applicationdeveloper; authenticate the application developer and authorize the APIcall; assign an access level to the application developer based on theprofile associated with the application developer; and controlpermissions given to the application developer for operating functionalcapabilities of the APIs based on the assigned access level.

These and other features and advantages of the embodiments of thepresent disclosure will be more readily apparent from the detaileddescription of the embodiments set forth below taken in conjunction withthe accompanying drawings.

BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 illustrates a system for providing an application platform withflexible permissioning according to an embodiment of the presentdisclosure.

FIG. 2 is a flow diagram illustrating a method for providing anapplication platform with flexible permissioning according to anembodiment of the present disclosure.

FIG. 3 is a flow diagram for controlling permissions to use functionalcapabilities of APIs according to an embodiment of the presentdisclosure.

FIG. 4 is a block diagram illustrating a system for implementing adevice according to one embodiment of the present disclosure.

Like element numbers in different figures represent the same or similarelements.

DETAILED DESCRIPTION

As will be further described herein in relation to various embodiments,systems and methods are provided for an application platform withflexible permissioning so that full access and use of all features ofapplication programming interfaces (APIs) may be controlled so that anapplication developer is allowed to access and/or use only those APIfeatures that the particular application developer may need based on theapplication developer's profile.

In this regard, features or functional capabilities of APIs may becatalogued into tiers or levels associated with a degree of risk for aparticular application developer. An application developer is givenpermission to use or access only the features or functional capabilitiesin the tier or level to which the application developer has been grantedpermission. Furthermore, limits related to the functional capabilitiesmay be configurable based on the degree of risk associated with theapplication developer's profile.

Referring now to the drawings wherein the showings are for purposes ofillustrating embodiments of the present disclosure only, and not forpurposes of limiting the same, FIG. 1 illustrates a system for providingan application platform with flexible permissioning according to anembodiment of the present disclosure.

A service provider 102 is adapted to interact, communicate or exchangedata with an application development server 106 and a client device 108via a network 104. Data connections between service provider 102 andapplication development server 106 and client device 108 may take place,for example, via SMS or a Wireless Application Protocol (WAP) overnetwork 104. In addition, according to one or more embodiments, serviceprovider 102 may have other data connections (not shown), for example,with subscriber Internet companies, Internet financial companies,Internet brokers or other Internet companies. In one embodiment, serviceprovider 102 may be implemented by a payment service provider such asPayPal™, Inc., or eBay™, Inc. of San Jose, Calif.

Application development server 106 includes an application developmentapplication 124 that may be configured to process the creation and/ordeployment of applications by application developers to be downloaded byone or more users of client device 108. The application developer may bean entity, for example an individual or a corporation, which developsone or more portions of an application, for example a softwareapplication, operable on different types of client devices. Examples ofapplication developers include iTunes™, Sprint™, mFoundry™, Tivo™, Wii™,Playstation™, RIM™ application store, or the like. The applicationdeveloper may be known or unknown to the manufacturer of client device108.

Service provider 102 includes an application platform 130 that may beconfigured to interact with application developer server 106 so that anapplication developer is enabled to call APIs 131 in order to developone or more applications. In this regard, service provider 102 mayprovide information to application development server 106 to assist theapplication developer in creating and/or deploying an application in amanner which is compatible with client device 108. Service provider 102may assign application identifiers 137 for both internal and externalidentification.

Service provider 102 may maintain a plurality of application developeraccounts 134, each of which may include account information 135associated with specific application developers. For example, in oneembodiment, account information 135 may include private or confidentialinformation of an application developer such as account numbers,passwords, credit/debit card information, bank information, or otherinformation that may be used to facilitate online or other types oftransactions between service provider 102 and application developersusing application development server 106.

The application developer may first register, prepare or otherwise signup to use application platform 130 implemented by service provider 102.An application is externally developed software that may use APIs 131 ofapplication platform 130. An application developer may also be referredto as an “App caller,” which is an entity making an API call.Applications may be composed of one or more API calls and are run by Appcallers. An API call is an operation being called by the applicationdeveloper, for example, to use a specific operation of service provider102. In an embodiment where service provider 102 is a payment serviceprovider such as PayPal, an operation may be called for the purpose of,for example, splitting payments between recipients. Application platform130 may provide one or more specific capabilities referred to as a“functional capability.” For example, in an embodiment where serviceprovider 102 is implemented by a payment service provider, a functionalcapability may include a split payment. It should be noted that afunctional capability may not be necessarily tied to a single API call.

Service provider 102 may further include a risk processing application136 configurable to evaluate received information from applicationdevelopment server 106 over network 104 and store the information in aplurality of records that are associated with application developeraccounts 134 so that a profile may be created for each applicationdeveloper. It will be appreciated that by performing a plurality oftransactions by an application developer with application developmentserver 106, a plurality of records may be stored by service provider 102and associated with an appropriate application developer account 134.Authorization information based on the plurality of records may bestored in an application developer authorization processing application138.

The centralized storage of information or data of service provider 102may be combined and enhanced with data obtained from business partnersof service provider 102 including subscriber acquirers, brands, Internetcompanies, or other entities. In one embodiment where service provider102 is PayPal™, Inc., the centralized stored information or data may becombined with data obtained from PayPal's business partners such aseBay™, thus resulting in even richer and more extensive data.

Client device 108 may be configured to download, install, and runapplications created and/or deployed by application development server106. Client device 108 may be implemented using any appropriatecombination of hardware and/or software configured for wired and/orwireless communication over a network. For example, in one embodiment,client device 108 may be implemented as a mobile device in communicationwith network 104 such as the Internet or another network. In otherembodiments, client device 108 may be implemented as a personalcomputer, wireless telephone, personal digital assistant (PDA), key fob,smart phone, smart card, notebook computer, game console, digital videorecorder (DVR), and/or other types of computing devices. Furthermore,client device 108 may be enabled for NFC, Bluetooth, online, infraredcommunications and/or other types of communications.

Application development server 106 may include various otherapplications 126 as may be desired in particular embodiments to providedesired features to application developers using application developmentserver 106. For example, in various embodiments, other applications 126may include security applications for implementing security features orany other types of applications.

Application development server 106 may provide information to serviceprovider 102 to open an application developer account 134. In thisregard, it will be appreciated that the application developer mayprovide account information to service provider 102 over network 104through, for example, a secure connection between applicationdevelopment server 106 and service provider 102. For example, serviceprovider 102 may provide a webpage that may be viewed by an applicationdeveloper through a browser application.

The information provided to service provider 102 may be used to assign aspecific application developer identifier 128, which applicationdevelopment server 106 may store, and may be used to identify theparticular application developer as having an application developeraccount 134 maintained by service provider 102. Application developeridentifiers may be implemented, for example, as one or more cookies,operating system registry entries, hardware identifiers, or other typesof identifiers. Other data specific to the application developer may becreated and stored by service provider 102, including for example,signature information and an application developer profile 139.Signature information is a way to identify the application developer.Furthermore, application developer profile 139 may be created, forexample, based on an application developer's typical behavior intransactions.

Client device 108, application developer server 106, and serviceprovider 102 may each include one or more processors, memories, andother appropriate components for executing instructions such as programcode and/or data stored on one or more computer readable mediums toimplement the various applications, data, and methods described herein.For example, such instructions may be stored in one or more computerreadable mediums such as memories or data storage devices internaland/or external to various components of the system, and/or accessibleover a network, which may be implemented as a single network or acombination of multiple networks. For example, in various embodiments,network 104 may include the Internet or one or more intranets, landlinenetworks, wireless networks, and/or other appropriate types of networks.

FIG. 2 is a flow diagram illustrating a method for providing anapplication platform with flexible permissioning according to anembodiment of the present disclosure. The method of FIG. 2 may beimplemented by the system of FIG. 1 according to an embodiment.

In block 202, service provider 102 may receive an API call from anapplication developer or App caller using application development server106. The App caller may wish to create an application and accessfeatures of an API 131 of application platform 130. App callers may alsobe known as Actors with existing authorization and authorizationcredentials such as username, password or passcode, and a 3-tokensignature or certificate.

In block 204, service provider 102 authenticates the App caller andauthorizes the API call. For example, service provider 102 may firstverify the App caller's credentials such as username, password orpasscode so that the credentials match information maintained by serviceprovider 102. For example, information in connection with applicationdeveloper identifier 128 of application development server 106 isverified. Other data maintained at service provider 102 such assignature information and application developer profile informationmaintained for example in application developer profile 139, may also beused to correlate and authenticate the application developer. Ifparticular information provided by the App caller appears to be out ofline with the App caller's typical profile as maintained in applicationdeveloper profile 139, the App caller may not be authenticated. Forinstance, if the application developer generally only deals withtransactions over the telephone for a particular technology, atransaction related to a different odd technology may raise a fraudalert. Other data that may raise fraud alerts include the number oftransactions, the time of day or the time of year when the transactiontakes place. Finally, transactions made over application developmentserver 106 may also provide geo-location information using for example aGlobal Positioning Satellite (GPS) to identify the location of theapplication development server 106 (and correspondingly the applicationdeveloper). The location of application developers as well as othercredentials may be helpful in establishing risk models for transactions.

In addition, an API may be checked to ensure that the API is valid andactive. If the App caller is allowed to use the particular API, then theAPI call may be authorized. If the App caller is not allowed to use theparticular API, then the API call is rejected.

In block 206, once an App caller is authenticated and the API call isauthorized, an “Access Level” is assigned to the App caller based on theApp caller's profile. When an entity applies to be an applicationdeveloper or App caller (caller of APIs of application platform 130),the entity may be vetted using a risk analysis or technique used by RiskProcessing Application 136 of service provider 102. The App caller maybe vetted, for example, on its financial and identity trustworthiness.Based on such vetting, application developer account 134 for theparticular App caller may be assigned an Access Level with respect toAPIs 131 in application platform 130.

In block 208, controlled permissions are given to the App caller toperform operations available based on its assigned Access Level. Thatis, all functional capabilities in the assigned Access Level may beallowed when the App caller makes a call. APIs 131 may be called onlywithin the context of an application. Each application may be identifiedby application identifier 137.

Application platform 130 of service provider 102 exposes services toexternal application developers or App callers using applicationdevelopment server 106 to create applications. As such, risk analysismay be used to classify an App caller into a tier. A tier (also known asa “level”) is a level of risk associated with a given App caller, andmay also be used to provide an initial set of functional capabilities toa particular App caller. Tiers may be created for the services builtinto application platform 130. Functional capabilities may also beplaced into several tiers based on a risk factor of a functionalcapability.

In an embodiment where service provider 102 is a payment serviceprovider such as PayPal, API calls may be placed in connection with, forexample, different adaptive payments such as splitting payments todifferent receivers in series or parallel, creating accounts, or thelike. Examples of functional capabilities are shown in Table 1 below,and include:

TABLE 1 Examples of functional capabilities Associated API CallFunctional Capability AdaptivePayment.Pay Make Parallel PaymentAdaptiveAccount.CreateAccount Create Personal AccountAdaptiveDispute.CreateDispute Can Create US Account

As discussed above, functional capabilities may be placed into severaltiers based on a risk factor of a functional capability. Table 2 belowillustrates an example of a tier in an embodiment where service provider102 is a payment service provider such as PayPal. Examples of a tier (ora level) may include a “Standard” tier and an “Advanced” tier. As shownin Table 2, for example, an API call for Adaptive Payments.Pay inconnection with a functional capability “Simple Send Money” is placed ina Standard tier. An API call for Adaptive Payments.Pay in connectionwith a functional capability to “Make Preapproved Payment” is placed inan Advanced tier. Examples of a tier (or a level) include:

TABLE 2 Examples of a Tier (or a Level) Tier Associated API CallFunctional Capability Standard AdaptivePayments.Pay Simple Send MoneyAdaptiveTransaction.GetTransactionDetails Get Transaction DetailsAdvanced AdaptivePayment.Pay Make Preapproved PaymentAdaptiveAccounts.CreateAccount Create Account

That is, functional capabilities may be based on tiers, standard oradvanced. It should be understood that functional capabilities are notnecessarily tied to one specific API call.

Permissions in either the standard tier or the advanced tier may begiven to an application developer or App Caller based on the profile orvetting of the application developer. The application developer with aqualifying profile or vetting may be classified in the advanced tier andhave access to corresponding functional capabilities therein. Suchgranular process allows for general access as a whole within a tier ormay be broken into smaller usable segments. For example, a billingagreement may be given only to certain levels of access depending on thetier thus allowing for a level of flexibility based on risk factors thatlimit access to certain provisions. Only vetted application developersmay use or access certain or all features of an API as needed, whereasapplication developers that are not qualified may only have limited orno use or access to such features.

By way of example and not of limitation, an analogy may be made withrespect to fine tuning or turning of a knob wherein access to certainAPI features or functions is granted upon tweaking of the knob toincrease or decrease limits, feedback and/or access as will be describedherein.

FIG. 3 is a flow diagram for controlling permissions to use functionalcapabilities of APIs according to an embodiment of the presentdisclosure. Use of functional capabilities of APIs may be controlledwith respect to an App Caller in various manners. For example, Appcallers may exercise functional capabilities in connection with an APIcall as follows: a) in block 302, only within the assigned “AccessLevel” as discussed above; b) in block 304, only within the assigned“Access Level,” except for functional capabilities that are explicitlyturned off; c) in block 306, only within the assigned “Access Level”including additional functional capabilities such as additional BusinessUnit (BU)-level functional capabilities; and d) in block 308, onlywithin specified limits. A BU-level functional capability may bedetermined by service provider 102 in accordance with, for example,specific business goals.

In block 302, with respect to App callers exercising functionalcapabilities as discussed above, all App callers may be vetted andassigned a corresponding Access Level in connection with an applicationdeveloper or App caller account 134. All functional capabilities in theassigned Access Level are allowed when an App caller makes a call.However, if an App caller tries to exercise a functional capability thatis in a level higher than what the App caller is vetted for, then thecall is rejected in block 310, for example, with an error code ormessage.

The relationship between an App caller's account 134 and its AccessLevel may be stored in a domain for Risk Processing Application 136 ofservice provider 102. The relationship between functional capabilitiesand Access Levels may also be stored in a domain in Risk ProcessingApplication 136. Application Developer Authorization ProcessingApplication (also referred to as “Userauthserv”) 138 may use the list offunctional capabilities available to an application developer or Appcaller account based on the Access Level for granting or rejectingpermissions.

In block 304, after an App caller is vetted and correspondingly assignedto an Access Level, additional controls, limits or restrictions may beimposed on the App caller's account 134, for example, by turning offcertain functional capabilities for the particular App caller. If theApp caller tries to exercise a functional capability that has beenturned off, the call is rejected in block 310, for example, with anerror code or message.

The relationship between an App caller account and the list offunctional capabilities that are turned off, may be stored, for example,in an application developer domain in Userauthserv 138, which reconcilesthe list of functional capabilities provided at Risk ProcessingApplication 136 with the functional capabilities that are turned off.

In block 306, in addition to risk-controlled functional capabilities,there may be an additional category of functional capabilities that maybe managed or controlled. For example, additional Business Unit(BU)-level functional capabilities may be managed. This allows aBusiness Unit to enable additional functionality for an App Caller'saccount without having to go through risk vetting.

Default settings for each control may be applied to each applicationdeveloper account, that is, no special policy or rule is necessary thatdetermines whether or not a particular functional capability is allowed.That is, a BU, for example, may turn on additional functionalcapabilities for a particular application developer account. If an AppCaller tries to exercise a functional capability that is not turned onfor the particular App Caller's account, the call may be rejected inblock 310, for example, with an error code or error message.

The relationship between an App Caller account and selected functionalcapabilities, for example, BU-level functional capabilities may bestored, for example, in an application developer domain in Userauthserv138, which adds BU-level controls with respective answers (e.g., grantedor rejected) to the list of functional capabilities.

In block 308, one or more functional capabilities may have specifiedlimits associated with them. If an App caller tries to exercise afunctional capability that is not within the specified limits for theparticular App caller's account, the call may be rejected in block 310,for example, with an error code or error message. Specified limits andexamples will be described in more detail below.

In block 312, permissions are granted to App Callers exercisingfunctional capabilities of APIs when the functional capability is withinan assigned Access Level, the functional capability is not turned “OFF”,the functional capability is included as an additional functionalcapability, and a specified limit for the functional capability is met.

With respect to specified limits, limits normally may represent somenumeric values that refine the functional capability or control. Forexample, an application developer account 134 may be allowed to exercisechained-payments, but only up to 4 legs (or transactions). Limits may beconfigurable for each application developer account such that twodifferent accounts with the same functional capability turned on mayexercise that functional capability up to the different limits,respectively.

In some embodiments, there may be two types of limits: numeric rates andgeographic. Generally, numeric and geographic limits may be enabled forany functional capability or control. Table 3 below illustrates anexample of numeric-preapproval limits:

TABLE 3 Numeric - Preapproval Limits Functional Capabilities APPreapproval $xxx/unlimited unlimited/N unlimited/N N years Preapprovalwith PIN $xxx/unlimited unlimited/N unlimited/N N years PreapprovalSubscrption $xxx/unlimited unlimited/N unlimited/N N years

In the example of Table 3 above, pre-approval limits may be settable forthe maximum amount of money, the maximum amount of agreements, themaximum amount of transactions per agreement, and/or the maximumduration of an agreement allowed based in general or in connection withan identifier such as a PIN or passcode or a subscription. In oneembodiment, an App Caller may be limited or restricted to a smaller setof operations or features of an API, or may be required to pay a higheramount of money for increased use of operations or features.

Limits may also be imposed based on rates. Table 4 below illustrates anexample of numeric-rate limits:

TABLE 4 Numeric - Rate Limits Functional Capabilities AA Create ConsumerAccount Web 100 N N Create Consumer Account Mobile 100 N N CreateBusiness Acct Web 100 N N Create Business Acct Mobile 100 N N

In the example of Table 4 above, rate limiting may be conducted for thenumber of calls per day, the number of calls per months, and/or thenumber of calls per week allowed based on different types of accountssuch as consumer or business accounts over a network such as theInternet or web, or over a mobile device.

Functional capabilities may further be limited based on geographiclimits. Table 5 below illustrates an example of geographic limits:

TABLE 5 Geographic Limits Functional Capabilities Create ConsumerAccount Web ON/OFF ON/OFF ON/OFF ON/OFF ON/OFF Create Consumer AccountMobile ON/OFF ON/OFF ON/OFF ON/OFF ON/OFF Create Business Acct WebON/OFF ON/OFF ON/OFF ON/OFF ON/OFF Create Business Acct Mobile ON/OFFON/OFF ON/OFF ON/OFF ON/OFF

In the example of Table 5 above, geographic limits or controls may beimposed where allowed based on different types of accounts such asconsumer or business accounts over a network such as the Internet orweb, or over a mobile device. By default, functional capabilities may beallowed everywhere. However, an ON/OFF switch may be used to restrictthe functional capability to a certain geographical location(s). In anembodiment where service provider 102 is a payment service provider suchas PayPal, for example, a functional capability may be configurable tocertain geographical locations such as API Caller Home, EU (Europe), PPInc (corporate headquarters), AU (Australia) and/or CA (Canada).

Embodiments of the present disclosure provide a solution for evaluatingpolicies or rules associated with an App Caller for determining whetheror not a particular functional capability in an application platform isallowed in connection with the particular App Caller. In general, APIcalls made to application platform 130 of service provider 102 mayoperate functional capabilities for which they are authorized.Authorization information may be provided for a particular App Callermaking an API call. The authorization information may include: 1) acomplete list of functional capabilities with a decision to grant orreject; and 2) a list of limits associated with the functionalcapabilities.

The authorization information may be used for enforcement purposes. Ifall functional capabilities are shown as not granted (or rejected), theAPI call is rejected with, for example, an error code or message. If anApp Caller tries to exercise a functional capability that is notauthorized, the API call is rejected with, for example, an error code ormessage. If an App caller tries to execute a functional capabilityviolating the limits, the API call is rejected with, for example, anerror code or message. It should be noted that error codes or messagesmay or may not be the same for each instance of rejecting an API call.

Each API call may be annotated with one or more functional capabilities.A call may then be made into the Userauthserv 138 with the list offunctional capabilities. The results of the evaluation are then reportedback. The result of the evaluation includes the list of functionalcapabilities, the policy decision on each functional capability (yes/no)and the reason for refusal (if any). Furthermore, if applicable, a listof limits associated with the functional capabilities in question willbe returned.

To facilitate the evaluation process, each operation may be annotatedwith all the functional capabilities. Logic for annotation processingmay be created. On each incoming call, the annotations may be processedand Userauthserv 138 may be called to provide the list of functionalcapabilities to evaluate. The evaluation results may be stored in asecurity context of the call. Ways for reading the security context maybe provided so that the results of the evaluation may be read andenforced.

Every functional capability may have a policy associated therewith. Apolicy is a rule or logical expression that evaluates account propertiesand arrives to, for example, a Boolean result. Table 6 below is anexample of account properties that may be evaluated for each functionalcapability. Table 6 may be an example associated with an embodimentwhere service provider 102 is a payment service provider such as PayPal:

TABLE 6 Policies for Functional Capabilities Standard SIMPLE_SEND_MONEYDoes App Caller have a Business Verified PARALLEL_PAYMENTS Account?GET_PAYMENT_DETAILS INITIATE_REFUNDS CONVERT_CURRENCYCREATE_CONSUMER_ACCOUNT_WEB GET_VERIFIED_STATUSCREATE_BUSINESS_ACCOUNT_WEB Does App Caller have Business Verifiedaccount? Does App Caller belong to Entry Access Level? Is not restrictedto use a FC? Does App Caller have Business Verified account? Does AppCaller belong to Advance Access Level? Is not restricted to use a FC?PREAPPROVALS_WITH_PIN Does App Caller have Business VerifiedGET_BILLING_ADDRESS account? Does App Caller belong to Advanced PlusAccess Level? Is not restricted to use a FC? ADD_BANK_ACCOUNT_DIRECTDoes App Caller have Business Verified account? Does App Caller belongto Strategic Partner Access Level? Is not restricted to use a FC? BU-Does App Caller have a Business Verified Controlled Account? Is AppCaller allowed to use a BU-controlled Functional Capability?

In the example of Table 6 above, six “Access Levels” may be provided forspecific functional capabilities depending on the applicable policies.For a “Standard” Access Level, an API caller would have access to thefunctional capabilities listed therein if the App Caller has a businessverified account.

For an “Entry” Access Level, an API caller would have access to thefunctional capabilities listed therein if the App Caller has a businessverified account, belongs to “Entry” Access Level, and is not restrictedto use a functional capability.

For an “Advanced” Access Level, an API caller would have access to thefunctional capabilities listed therein if the App Caller has a businessverified account, belongs to “Advanced” Access Level, and is notrestricted to use a functional capability.

For an “Advanced Plus” Access Level, an API caller would have access tothe functional capabilities listed therein if the App Caller has abusiness verified account, belongs to “Advanced Plus” Access Level, andis not restricted to use a functional capability.

For a “Strategic Partner” Access Level, an API caller would have accessto the functional capabilities listed therein if the App Caller has abusiness verified account, belongs to “Strategic Partner” Access Level,and is not restricted to use a functional capability.

Finally, for a “BU-Controlled” Access Level, an API caller would haveaccess to the functional capabilities listed therein if the App Callerhas a business verified account and is allowed to use a BU-controlledfunctional capability.

According to one or more embodiments, service provider 102 may havecertain administrative capabilities with respect to Access Levels forAPIs. Administrative capabilities may include, for example: i) switchingAccess Levels for App callers; ii) restricting App caller's access to afunctional capability within an assigned tier; iii) allowing App callersto access non-risk functional capabilities; and iv) setting limits foran App caller.

With respect to i) switching Access Levels for App callers, when anAccess Level is changed for an App caller, the list of functionalcapabilities is dynamically updated to reflect the functionalcapabilities allowed for that Access Level. For example, the setting maybe turned to “ON” for each functional capability that is provisioned atthe particular Access Level. Only functional capabilities available forthe particular Access Level may be shown in addition to default limits.

With respect to ii) restricting App caller's access to a functionalcapability within an assigned tier, when a functional capability needsto be turned OFF, an interface such as a button or a toggle may beprovided. When a functional capability is “OFF”, the defaults may beshown in faded mode or not shown at all. Table 7 below is an exampleshowing toggle interfaces that may be used to change payment permissionswith respect to functional capabilities and related limits. For example,permission may be given for a “Chained Payment” functional capability,or, if desired, the permission may be rejected by using the toggleinterface to switch to “No.” Correspondingly, for example, a limit onthe number of transactions per split may also be set. In this example,the limit is set to 3 transactions per split:

TABLE 7 Example of Payment Permissions Chained Payment: Yes [Toggle]Number of transactions per split: 3 Parallel Payment: Yes [Toggle]Number of transactions per split: 3 Implicit Payment: Yes [Toggle]Simple Payment: Yes [Toggle] Get Payment Details: Yes [Toggle] Refund:Yes [Toggle] Convert Currency: Yes [Toggle] Get Billing Address: Yes[Toggle]

With respect to iii) allowing App callers to access non-risk functionalcapabilities, in general, functional capabilities that are notassociated with any Access Level may be turned “OFF” by default. In somecases, an interface such as a button or a toggle may be provided to turn“ON” a non-risk functional capability.

With respect to iv) setting limits for an App Caller, editable fieldsfor limits such as numeric limits may be provided, for example, asillustrated in Tables 3 and 4 above. In an embodiment where geographicallimitations are to be set, the ability to restrict a functionalcapability to a location may be provided.

Referring now to FIG. 4, a block diagram of a system for implementing adevice is illustrated according to one embodiment of the presentdisclosure.

FIG. 4 is a block diagram of a system 400 suitable for implementingembodiments of the present disclosure, including client device 108,application development server or device 106, and service provider 102server or device. System 400, such as part of a mobile phone, personalcomputer and/or a network server, includes a bus 402 or othercommunication mechanism for communicating information, whichinterconnects subsystems and components, including one or more of aprocessing component 404 (e.g., processor, micro-controller, digitalsignal processor (DSP), etc.), a system memory component 406 (e.g.,RAM), a static storage component 408 (e.g., ROM), a network interfacecomponent 412, a display component 414 (or alternatively, an interfaceto an external display), an input component 416 (e.g., keypad orkeyboard), and a cursor control component 418 (e.g., a mouse pad).

In accordance with embodiments of the present disclosure, system 400performs specific operations by processor 404 executing one or moresequences of one or more instructions contained in system memorycomponent 406. Such instructions may be read into system memorycomponent 406 from another computer readable medium, such as staticstorage component 408. These may include instructions to createaccounts, process applications, process financial transactions, makepayments, etc. In other embodiments, hard-wired circuitry may be used inplace of or in combination with software instructions for implementationof one or more embodiments of the disclosure.

Logic may be encoded in a computer readable medium, which may refer toany medium that participates in providing instructions to processor 404for execution. Such a medium may take many forms, including but notlimited to, non-volatile media, volatile media, and transmission media.In various implementations, volatile media includes dynamic memory, suchas system memory component 406, and transmission media includes coaxialcables, copper wire, and fiber optics, including wires that comprise bus402. Memory may be used to store visual representations of the differentoptions for application processing, payments, financial transactions orother transactions. In one example, transmission media may take the formof acoustic or light waves, such as those generated during radio waveand infrared data communications. Some common forms of computer readablemedia include, for example, RAM, PROM, EPROM, FLASH-EPROM, any othermemory chip or cartridge, carrier wave, or any other medium from which acomputer is adapted to read.

In various embodiments of the disclosure, execution of instructionsequences to practice the disclosure may be performed by system 400. Invarious other embodiments, a plurality of systems 400 coupled bycommunication link 420 (e.g., network 104 of FIG. 1, LAN, WLAN, PTSN, orvarious other wired or wireless networks) may perform instructionsequences to practice the disclosure in coordination with one another.Computer system 400 may transmit and receive messages, data, informationand instructions, including one or more programs (i.e., applicationcode) through communication link 420 and communication interface 412.Received program code may be executed by processor 404 as receivedand/or stored in disk drive component 410 or some other non-volatilestorage component for execution.

As described herein according to one or more embodiments, instead ofproviding full access to all API features to API callers that may nothave a need for such full access, flexible permissions are fine tuned orcontrolled in a granular way so that the API caller may use or accessonly API features or functional capabilities they need according to theAPI caller's profile.

Although various components and steps have been described herein asbeing associated with client device 108, application development server106, and service provider 102 of FIG. 1, it is contemplated that thevarious aspects of such servers illustrated in FIG. 1 may be distributedamong a plurality of servers, devices, and/or other entities. Forexample, in one embodiment, risk processing application 136 may beimplemented by an entity separate from service provider 102.Accordingly, in such an embodiment, communications described hereinperformed in relation to risk processing application 136 may be providedto a separate entity and need not be routed through service provider 102in all instances.

Where applicable, various embodiments provided by the present disclosuremay be implemented using hardware, software, or combinations of hardwareand software. Also where applicable, the various hardware componentsand/or software components set forth herein can be combined intocomposite components comprising software, hardware, and/or both withoutdeparting from the spirit of the present disclosure. Where applicable,the various hardware components and/or software components set forthherein may be separated into sub-components comprising software,hardware, or both without departing from the spirit of the presentdisclosure. In addition, where applicable, it is contemplated thatsoftware components may be implemented as hardware components, andvice-versa.

Software in accordance with the present disclosure, such as program codeand/or data, may be stored on one or more computer readable mediums. Itis also contemplated that software identified herein may be implementedusing one or more general purpose or specific purpose computers and/orcomputer systems, networked and/or otherwise. Where applicable, theordering of various steps described herein may be changed, combined intocomposite steps, and/or separated into sub-steps to provide featuresdescribed herein.

The foregoing disclosure is not intended to limit the present disclosureto the precise forms or particular fields of use disclosed. It iscontemplated that various alternate embodiments and/or modifications tothe present disclosure, whether explicitly described or implied herein,are possible in light of the disclosure.

Having thus described embodiments of the disclosure, persons of ordinaryskill in the art will recognize that changes may be made in form anddetail without departing from the scope of the disclosure. Thus thedisclosure is limited only by the claims.

1. (canceled)
 2. A system, comprising: a non-transitory memory; and oneor more hardware processors coupled to the non-transitory memory andconfigured to read instructions from the non-transitory memory to causethe system to perform operations comprising: receiving an applicationprogramming interface (API) call from an application server, wherein theAPI call is associated with a transaction request being processedthrough the application server for an end-user; accessing a plurality oftransactions processed through the application server based on one ormore API calls to the system; determining, from a plurality of accesslevels, an access level for the API call based on the plurality oftransactions; and processing the API call for the application serveraccording to the determined access level.
 3. The system of claim 2,wherein the plurality of access levels corresponds to differentfunctional capabilities of the system, and wherein the operationsfurther comprise: determining whether the API call is associated withone or more functional capabilities of the system that correspond to thedetermined access level.
 4. The system of claim 3, wherein theoperations further comprise: performing one or more functions associatedwith the transaction request in response to determining that the APIcall is associated with the one or more functional capabilities of thesystem that correspond to the determined access level.
 5. The system ofclaim 3, wherein the operations further comprise: transmitting an errorcode to the application server in response to determining that the APIcall is not associated with the one or more functional capabilities ofthe system that correspond to the determined access level.
 6. The systemof claim 2, wherein the operations further comprise: receiving accountcredentials from the application server; and authenticating theapplication server based on the account credentials.
 7. The system ofclaim 6, wherein the plurality of transactions is accessed based on theaccount credentials received from the application server.
 8. The systemof claim 2, wherein the plurality of access levels comprises at least afirst type of access level and a second type of access level having atleast one different functional capability than the first type of accesslevel.
 9. A method, comprising: receiving, by one or more hardwareprocessors associated with a service provider server, an applicationprogramming interface (API) call from an application server, wherein theAPI call is associated with a transaction request being processedthrough the application server for an end-user; accessing a plurality oftransactions processed through the application server based on one ormore API calls to the service provider server; determining, among aplurality of risk level, a particular risk level for the applicationserver based on the plurality of transactions; and processing, by theone or more hardware processors, the API call for the application serverbased on the particular risk level.
 10. The method of claim 9, whereinthe transaction request is associated with a payment transaction. 11.The method of claim 9, further comprising: identifying a first categoryof API calls associated with the one or more API calls; and determiningthat the API call is associated with a second category of API callsdifferent from the first category of API calls, wherein the particularrisk level is determined for the application server based on thedetermining that the API call is associated with the second category ofAPI calls different from the first category of API calls.
 12. The methodof claim 9, further comprising determining a number of transactions inthe plurality of transactions, wherein the particular risk level isdetermined for the application server based on the number oftransactions.
 13. The method of claim 9, further comprising: determininga temporal attribute associated with the plurality of transactions; anddetermining whether a time when the API call was received corresponds tothe temporal attribute, wherein the particular risk level is determinedfor the application server based on the determining whether the timewhen the API call is received corresponds to the temporal attribute. 14.The method of claim 9, further comprising: determining a locationattribute associated with the plurality of transactions; and determiningwhether a location associated with the transaction request correspondsto the location attribute, wherein the particular risk level isdetermined for the application server based on the determining whetherthe location associated with the transaction request corresponds to thelocation attribute.
 15. The method of claim 9, further comprising:determining a transaction amount limit for the API call based on theparticular risk level; and determining that the API call is associatedwith a transaction amount below the transaction amount limit, whereinthe API call is processed based on the determining that the transactionamount below the transaction amount limit.
 16. A non-transitorymachine-readable medium having stored thereon machine-readableinstructions executable to cause a machine to perform operationscomprising: receiving an application programming interface (API) callfrom an application server; authenticating the application server basedon credentials received from the application server; accessing, usingthe received credentials, a plurality of transactions processed throughthe application server based on one or more API calls to the machine;assigning, from a plurality of access levels, an access level for theAPI call based on the plurality of transactions; and processing the APIcall for the application server according to the assigned access level.17. The non-transitory machine-readable medium of claim 16, wherein theoperations further comprise: obtaining account settings associated withthe application server based on the received credentials; anddetermining whether a functional capability associated with the API callis turned on according to the account settings, wherein the API call isprocessed in response to determining that the functional capabilityassociated with the API call is turned on according to the accountsettings.
 18. The non-transitory machine-readable medium of claim 16,wherein the operations further comprise: obtaining account settingsassociated with the application server based on the receivedcredentials; determining whether a functional capability associated withthe API call is turned off according to the account settings; and inresponse to determining that the functional capability associated withthe API call is turned off according to the account settings,transmitting an error code to the application server.
 19. Thenon-transitory machine-readable medium of claim 16, wherein theplurality of access levels corresponds to different functionalcapabilities of the machine, and wherein the operations furthercomprise: determining whether the API call is associated with one ormore functional capabilities of the machine that correspond to theassigned access level.
 20. The non-transitory machine-readable medium ofclaim 19, wherein the operations further comprise: performing one ormore functions for the API call in response to determining that the APIcall is associated with the one or more functional capabilities of themachine that correspond to the assigned access level.
 21. Thenon-transitory machine-readable medium of claim 19, wherein theoperations further comprise: transmitting an error code to theapplication server in response to determining that the API call is notassociated with the one or more functional capabilities of the machinethat correspond to the assigned access level.